Lucene search

GoogleOSV:CVE-2024-24147

HistoryFeb 29, 2024 - 1:44 a.m.

CVE-2024-24147

2024-02-2901:44:11

Google

osv.dev

memory leak

libming

parseswf_fillstylearray

denial of service

swf file

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file.

CPENameOperatorVersion
libmingeqming-0_3_beta2
libmingeqming-0_4_5
libmingeqming-0_4_0_beta4
libmingeqming-0_3_0
libmingeqming-0_4_6
libmingeqming-0_4_4
libmingeqming-0_4_3
libmingeqming-0_4_8
libmingeqming-0_4_0_beta5
libmingeqming-0_4_0_rc1

Name	Operator	Version
libming	eq	ming-0_3_beta2
libming	eq	ming-0_4_5
libming	eq	ming-0_4_0_beta4
libming	eq	ming-0_3_0
libming	eq	ming-0_4_6
libming	eq	ming-0_4_4
libming	eq	ming-0_4_3
libming	eq	ming-0_4_8
libming	eq	ming-0_4_0_beta5
libming	eq	ming-0_4_0_rc1

Rows per page:

1-10 of 131

References

github.com/libming/libming/issues/311

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for OSV:CVE-2024-24147